Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: 8n/Vef2OZ4gvum9LFgBqAUAHYurfuEv0SemF6354J7o=
Subject key identifier: 25:E7:21:53:93:A8:15:72:C0:5A:32:88:2B:CA:55:05:78:92:38:20
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019D9D07B39FF0647338516C5520A09E7319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0D3E
Signing time: Fri 17 Apr 2026 20:00:20 +0000
Manifest this update: Fri 17 Apr 2026 20:00:20 +0000
Manifest next update: Sat 18 Apr 2026 20:00:20 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: aozlL1Vws3+F4wI+O8TjFM2FwMkdG0JK9eKcazrMWZw=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:b3:9f:f0:64:73:38:51:6c:55:20:a0:9e:73:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 17 20:00:20 2026 GMT
Not After : Apr 18 20:00:20 2026 GMT
Subject: CN=25e7215393a81572c05a32882bca550578923820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:77:48:b2:25:06:ed:50:49:96:06:5a:b4:
b4:6e:fc:79:80:03:8f:fe:c6:84:a6:8e:92:63:e1:
20:23:35:4f:87:33:46:f8:09:72:18:bd:63:8e:60:
dd:43:dc:6b:9f:3b:14:39:bb:7c:7a:e5:5f:e4:7b:
5d:34:fa:df:13:42:4e:64:3a:6b:0d:b3:6d:ab:ef:
4b:54:f0:72:25:5e:78:a8:56:7a:d0:09:12:c2:6f:
5b:b3:cc:41:dd:aa:be:9d:0f:57:c7:f5:06:53:79:
4d:ab:63:76:a9:f5:9b:d7:2c:4d:8a:af:e3:7d:b5:
4e:ef:0f:a7:f1:8a:b9:40:63:ce:a2:22:2c:63:e5:
d5:83:40:a8:37:86:6b:ad:46:77:c8:23:b9:05:d5:
dc:1b:b1:91:48:a3:21:77:2d:9b:2f:14:8e:44:4e:
94:b5:f7:6d:22:8f:53:0c:1b:9a:6e:d6:45:40:fc:
4c:66:ef:26:3e:68:06:df:29:97:8a:91:1d:fa:d0:
b5:79:37:28:0c:42:cf:75:dd:bd:64:4f:ba:1b:72:
35:76:6b:74:6e:32:cd:64:ae:52:83:4d:af:ba:20:
41:ed:dc:44:3a:b8:17:10:2b:09:7c:3c:28:9d:3a:
09:84:e3:c0:e4:2a:53:4a:f6:cd:85:40:cf:87:3f:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:21:53:93:A8:15:72:C0:5A:32:88:2B:CA:55:05:78:92:38:20
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:78:94:ae:72:17:a6:3f:39:06:5e:e0:19:32:1e:bc:0d:
73:83:66:8e:4e:b1:22:eb:9b:ee:e2:cf:2c:46:17:2b:74:28:
ae:94:d2:7a:11:78:55:aa:11:e3:a9:2a:94:6d:13:5c:53:a8:
43:61:b4:f2:ad:e8:04:b9:b7:db:24:17:fa:fe:9e:32:5d:e4:
72:20:ef:a1:3b:a7:53:e8:7c:61:3e:ec:fe:05:fd:8d:90:89:
2d:4b:9a:90:9e:f7:96:69:e6:64:81:a3:b2:31:1a:24:3c:cb:
70:d5:41:11:2f:a0:fc:5d:52:92:2f:61:fd:01:5a:f6:3f:13:
71:0a:a2:f6:77:eb:69:a6:83:a2:2e:7c:b7:bd:64:01:d9:dc:
a4:cf:51:ce:dc:f6:02:31:65:cf:38:19:18:3a:98:d1:73:2a:
b9:a0:90:b3:9d:ff:53:18:ba:7c:1f:3b:2b:d9:a7:b5:f4:61:
65:b1:ea:cc:af:78:25:6a:dc:11:5f:b6:00:ed:cb:79:9c:bb:
37:74:44:7d:c0:23:3b:97:c2:04:7c:61:4b:86:f6:83:a4:b5:
44:65:67:8c:39:b4:d6:51:4e:37:16:e2:63:2f:46:2b:10:06:
ef:27:7e:82:62:5b:67:d1:8e:5f:60:f8:be:36:36:5b:66:23:
aa:1a:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:34 2026 by rpki-client